CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...

CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...

CVE-2019-8410

CVE-2019-8410 affects Maccms 8.0, where an XSS exists due to improper handling of the t_key parameter in inc/config/cache.php and the related template logic in template/paody/html/vod_type.html, with a/tpl/module/db.php only filtering t_name. The vulnerability enables an attacker to store a scrip...

MACCMS 10 Cross-Site Request Forgery Vulnerability

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. MACCMS 10 has a cross-site request forgery vulnerability, which can be exploited by attackers to arbitrarily add to users...

CVE-2018-12114

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...

Cross site request forgery (csrf)

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...

CVE-2018-12114

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...

CVE-2018-12114

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...

CVE-2018-12114

CVE-2018-12114 affects MacCMS 10. A CSRF vulnerability allows an attacker to add administrator user accounts via the request targeting admin.php/admin/admin/info.html. The issue is demonstrated in public references and exploit entries, including an explicit POST form example used to create a new ...

MACCMS 10 Cross Site Request Forgery

Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSRF vulnerability in maccmsv10,this...

MACCMS 10 - Cross-Site Request Forgery (Add User)

MACCMS 10 - Cross-Site Request Forgery Add User Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I...

MACCMS 10 - Cross-Site Request Forgery (Add User) Vulnerability

Exploit for php platform in category web applications Exploit Title: MACCMSV10 CSRF vulnerability add admin account Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSR...

MACCMS 10 - Cross-Site Request Forgery (Add User)

Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSRF vulnerability in maccmsv10,this...

SQL Injection Vulnerability in MacCMS Version 8.x

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...

Cross site request forgery (csrf)

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733

CVE-2017-17733 affects Maccms 8.x. The vulnerability allows remote command execution via the wd parameter in an index.php?m=vod-search request. Primary impact is remote code execution with partial confidentiality/integrity/availability concerns (per NVD CVSS 2.0/3.0 data). Connected sources (Red ...

MacCMS Command Execution Vulnerability

Maccms is a cross-platform PHP and MySQL based rapid site building system. A security vulnerability exists in Maccms 8.x version. The vulnerability can be exploited by remote attackers to execute commands with the help of the 'wd' parameter in the index.php?m=vod-search request...